There is no patch for stupidity.

I characterize myself as a retired hacker. I'm applying what I know to improve security at companies.

Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business.

I made stupid decisions as a kid, or as a young adult, but I'm trying to be now, I'm trying to take this lemon and make lemonade.

I was pretty much the government's poster boy for what I had done.

My argument is not that I shouldn't have been punished, but that the punishment didn't fit the crime.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.